cbcvebase.
CVE-2019-4425
published 2019-08-20

CVE-2019-4425: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another user by inserting…

medium5.7CVSS 3.1
AVNACLPRLUIRSUCHINAN
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another user by inserting links that would be clicked on by unsuspecting users. IBM X-Force ID: 162771.

Affected

10 ranges
VendorProductVersion rangeFixed in
ibmbusiness_automation_workflow
ibmbusiness_automation_workflow
ibmbusiness_automation_workflow
ibmbusiness_automation_workflow18.0.0.0 – 19.0.0.2
ibmbusiness_process_manager
ibmbusiness_process_manager
ibmbusiness_process_manager
ibmbusiness_process_manager
ibmbusiness_process_manager8.0.0.0 – 8.0.1.3
ibmbusiness_process_manager8.5.0.0 – 8.5.0.2